locked
Preventing Windows 10 builds from downloading (1703, 1709, etc.) RRS feed

  • Question

  • We are preparing to start the rollout of Windows 10 Pro, we want to stick with Version 1607. We do have a few special systems using Version 1703.

    1) Is there a way to keep WSUS (we are on v3) from downloading Windows 10 versions other than 1607 (seems odd to call them versions)? If there is, will it prevent security\critical\etc. updates for version 1703 from downloading too, since we will still need to patch the few special machines that have that version?

    2) Is the better\safer way to do this, since we already manually approve stuff and "assign patches" to groups we've created in WSUS console, to just Not Approve the Windows 10 version stuff we don't want?

    Jason

    Thursday, November 16, 2017 12:54 AM

Answers

  • Hi Jason,

    >> Is there a way to keep WSUS (we are on v3) from downloading Windows 10 versions other than 1607 (seems odd to call them versions)?

    No .

    When WSUS 4.0 or later is installed for win10 upgrade , I'd suggest you disable any "automatic approvals" contains "upgrades" classification , then , manually approve upgrades to win10 1607 .

    Because , "upgrades" only contains OS version upgrade packages , such as , win7,8.1 . 

    It doesn't affect updates deployment for 1703.

    >>Is the better\safer way to do this, since we already manually approve stuff and "assign patches" to groups we've created in WSUS console, to just Not Approve the Windows 10 version stuff we don't want?

    Yes . Only do not approve other "upgrades" , except 1607 for specific .

     

    In addition , if you installed WSUS 4.0 , please install "KB3095113" and "KB3159706"  .


    Best Regards,

    Elton


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    • Marked as answer by Jack Leidu Thursday, November 16, 2017 8:26 PM
    Thursday, November 16, 2017 7:10 AM

All replies

  • We are preparing to start the rollout of Windows 10 Pro, we want to stick with Version 1607. We do have a few special systems using Version 1703.

    1) Is there a way to keep WSUS (we are on v3) from downloading Windows 10 versions other than 1607 (seems odd to call them versions)? If there is, will it prevent security\critical\etc. updates for version 1703 from downloading too, since we will still need to patch the few special machines that have that version?

    2) Is the better\safer way to do this, since we already manually approve stuff and "assign patches" to groups we've created in WSUS console, to just Not Approve the Windows 10 version stuff we don't want?

    Jason

    WSUS Version 3.x (Server 2008/Server 2008R2/SBS2008/SBS2011) cannot handle Feature Upgrades of Windows 10. It will however handle Cumulative Updates to a system that already has Windows 10 on it. If you want to use WSUS to handle upgrading Windows 10 systems to new future revisions (feature upgrades), you will need to deploy WSUS on Server 2012+ (6.x+).


    Adam Marshall, MCSE: Security
    http://www.adamj.org

    • Proposed as answer by Elton_Ji Friday, November 17, 2017 2:04 AM
    Thursday, November 16, 2017 4:21 AM
  • Hi Jason,

    >> Is there a way to keep WSUS (we are on v3) from downloading Windows 10 versions other than 1607 (seems odd to call them versions)?

    No .

    When WSUS 4.0 or later is installed for win10 upgrade , I'd suggest you disable any "automatic approvals" contains "upgrades" classification , then , manually approve upgrades to win10 1607 .

    Because , "upgrades" only contains OS version upgrade packages , such as , win7,8.1 . 

    It doesn't affect updates deployment for 1703.

    >>Is the better\safer way to do this, since we already manually approve stuff and "assign patches" to groups we've created in WSUS console, to just Not Approve the Windows 10 version stuff we don't want?

    Yes . Only do not approve other "upgrades" , except 1607 for specific .

     

    In addition , if you installed WSUS 4.0 , please install "KB3095113" and "KB3159706"  .


    Best Regards,

    Elton


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    • Marked as answer by Jack Leidu Thursday, November 16, 2017 8:26 PM
    Thursday, November 16, 2017 7:10 AM